aws / aws-parallelcluster-ui

Apache License 2.0
31 stars 20 forks source link

Using PCUI to manage clusters behind AWS Network Firewall IP whitelist #360

Open Khovic opened 2 months ago

Khovic commented 2 months ago

Hey, I have deployed a couple of ParallelClusters using PCUI and its been great, however I am now required to place the clusters behind an AWS Network Firewall with an IP whitelist. which results in the PCUI not being able to communicate with the head nodes. What is the correct way (if any) to have PCUI work with said clusters without making them public?

gmarciani commented 1 month ago

Hi @Khovic, thank you for your interest in PCUI. From PCUI you can connect to the head node using SSM sessions. To make this work you should permitt SSM to connect to the head node, by attaching the policy arn:aws:iam::aws:policy/AmazonSSMManagedInstanceCore to the head node. Have you already validated that this would not work for you?